$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json) Hash identifier: TOa6OkOSDMjDAWuEo4j57ALbFdvkJkxOOmrjO1WEeFc= Subject key identifier: 41:CB:07:4F:8F:D8:12:32:1C:50:02:73:50:8E:01:8B:21:C2:D9:2C Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019D9C2CAFCC4B63B057E721390F8F694110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft Manifest number: 0D7F Signing time: Fri 17 Apr 2026 16:01:07 +0000 Manifest this update: Fri 17 Apr 2026 16:01:07 +0000 Manifest next update: Sat 18 Apr 2026 16:01:07 +0000 Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=) 2: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=) 3: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=) 4: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: GXwS5s83meSdJz/J8box97uGN9Xa4+F3I5vWr+7Jbf4=) 5: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=) 6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=) 7: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=) 8: FWeLMrqzdI4hd96orsYQfK_d0Zc.roa (hash: /u234PjKVouqOKntVh4TgCtWCyFv7L7LbMqlU2f96A4=) 9: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=) 10: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=) 11: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=) 12: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=) 13: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:2c:af:cc:4b:63:b0:57:e7:21:39:0f:8f:69:41:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Apr 17 16:01:07 2026 GMT Not After : Apr 18 16:01:07 2026 GMT Subject: CN=41cb074f8fd812321c500273508e018b21c2d92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:53:f3:43:b3:e0:bd:97:c8:7d:2a:78:74: 27:92:2e:71:49:6e:71:5e:b8:e3:06:49:f6:0b:4b: 2e:cf:a7:45:73:2e:43:f0:fe:c8:36:fd:3f:70:26: d4:4b:b8:a5:dc:59:ff:db:fc:e8:3f:f1:f6:28:df: e4:47:e0:fb:8f:0e:12:71:a7:bf:2c:18:93:99:76: 52:6f:c1:07:5f:58:94:74:79:ff:25:89:a6:db:bb: 1f:87:7d:82:ee:00:6c:02:d2:26:6d:28:53:7d:69: bc:5b:ff:28:70:af:be:82:8a:dc:57:7a:cc:79:10: 30:27:6b:b2:f8:22:5e:42:02:69:cc:fb:ba:26:ab: 71:5f:09:e1:7e:29:ab:1c:64:b1:de:8d:a2:10:87: ba:4e:9f:d1:62:3c:b7:be:13:7d:8b:9b:93:b3:21: 28:f4:e1:db:b6:df:22:3b:6c:46:62:c8:39:44:39: 50:a4:59:99:35:48:08:88:28:36:69:d6:7b:54:c5: 61:03:b3:16:b1:33:3c:42:b0:b7:f1:56:e2:0c:44: 27:88:0c:6b:d3:10:cb:53:7e:6f:74:7c:99:2d:c0: 19:e2:e2:62:30:5f:26:fa:26:d3:bf:b2:db:30:f1: 58:cf:27:98:8a:fe:b0:89:dc:46:19:90:5c:df:7c: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:07:4F:8F:D8:12:32:1C:50:02:73:50:8E:01:8B:21:C2:D9:2C X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:05:e1:d3:b7:af:f2:c9:78:58:69:65:02:95:74:c5:61:5e: 68:22:b8:37:03:e7:be:6f:fe:97:e5:4b:1d:9f:12:ca:5d:5b: 0a:52:f3:4b:60:81:a3:cf:08:62:a4:00:7a:7c:4b:31:8b:d6: ad:ef:88:28:04:58:61:47:f3:52:76:c9:f5:bb:33:f1:36:b6: 65:0c:cf:82:e8:3d:92:3f:9c:a0:6d:f4:21:b3:6c:65:44:7f: b7:90:63:ce:37:86:ba:fa:3f:b3:10:fa:6b:a2:09:25:0a:95: 1a:c5:9f:b1:83:fe:4a:f8:99:a7:28:06:da:7c:51:c2:84:a1: 1f:45:e6:49:3c:1a:a4:d4:56:8e:ed:4c:f6:87:f8:12:db:0e: 04:76:a6:a6:8d:4d:25:0a:f7:bd:ab:14:4a:a2:bf:90:91:6d: 2c:58:9c:9b:69:64:74:d3:f1:fd:94:45:7b:77:ad:ca:6d:c5: 40:49:bf:7d:a4:6f:ee:1a:40:37:d2:ab:49:fa:35:06:eb:29: af:f3:fd:61:e4:65:c9:7d:dd:80:d6:d1:4d:dc:4d:aa:f0:69: 04:b5:a4:b7:68:03:5c:91:3f:26:c8:60:c1:fe:68:e7:34:f9: fb:da:2e:b0:07:a2:4e:9b:59:9e:d3:ae:d2:9f:02:d0:6e:05: b7:e9:7b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cLK/MS2OwV+chOQ+PaUEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwNDE3MTYwMTA3WhcNMjYwNDE4MTYwMTA3WjAzMTEwLwYDVQQD Eyg0MWNiMDc0ZjhmZDgxMjMyMWM1MDAyNzM1MDhlMDE4YjIxYzJkOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIFT80Oz4L2XyH0qeHQnki5xSW5x XrjjBkn2C0suz6dFcy5D8P7INv0/cCbUS7il3Fn/2/zoP/H2KN/kR+D7jw4Scae/ LBiTmXZSb8EHX1iUdHn/JYmm27sfh32C7gBsAtImbShTfWm8W/8ocK++gorcV3rM eRAwJ2uy+CJeQgJpzPu6JqtxXwnhfimrHGSx3o2iEIe6Tp/RYjy3vhN9i5uTsyEo 9OHbtt8iO2xGYsg5RDlQpFmZNUgIiCg2adZ7VMVhA7MWsTM8QrC38VbiDEQniAxr 0xDLU35vdHyZLcAZ4uJiMF8m+ibTv7LbMPFYzyeYiv6widxGGZBc33ybjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHLB0+P2BIyHFACc1COAYshwtksMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAXh07ev 8sl4WGllApV0xWFeaCK4NwPnvm/+l+VLHZ8Syl1bClLzS2CBo88IYqQAenxLMYvW re+IKARYYUfzUnbJ9bsz8Ta2ZQzPgug9kj+coG30IbNsZUR/t5BjzjeGuvo/sxD6 a6IJJQqVGsWfsYP+SviZpygG2nxRwoShH0XmSTwapNRWju1M9of4EtsOBHampo1N JQr3vasUSqK/kJFtLFicm2lkdNPx/ZRFe3etym3FQEm/faRv7hpAN9KrSfo1Busp r/P9YeRlyX3dgNbRTdxNqvBpBLWkt2gDXJE/Jshgwf5o5zT5+9ousAeiTptZntOu 0p8C0G4Ft+l7Bg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:07 2026 by rpki-client